Run dnsmasq as root. Ref. docker/docker#1951.